This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft File: fxYazxZAB-j32MdxFaWjnQQ2SPg.mft (raw, json) Hash identifier: BRicoQu7GMGX4n/ZXFO03L/CgnShxxG4BhSt9n4WWEI= Subject key identifier: B7:E8:25:A1:16:0B:AD:4F:F9:A6:5C:B9:3E:53:AF:0F:28:A7:49:D7 Authority key identifier: 7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8 Certificate issuer: /CN=A91E275B/serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8 Certificate serial: 34EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft Manifest number: 9B5E Signing time: Mon 22 Dec 2025 15:08:44 +0000 Manifest this update: Mon 22 Dec 2025 15:08:44 +0000 Manifest next update: Mon 29 Dec 2025 15:08:44 +0000 Files and hashes: 1: fxYazxZAB-j32MdxFaWjnQQ2SPg.crl (hash: Cjp/96zNR4sWkanttkMaDgtK0I5LypyQP5ye2nDoL1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:08:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13547 (0x34eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E275B, serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8 Validity Not Before: Dec 22 15:08:44 2025 GMT Not After : Dec 29 15:08:44 2025 GMT Subject: CN=69495efc-3c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8b:7d:2e:fd:49:9d:d3:02:3e:0d:f5:66:6c: 6d:0f:42:91:1a:8c:6b:24:ca:79:96:08:9c:c1:2f: 71:62:e0:4c:dc:b6:f7:65:67:ba:c7:45:e4:0b:d1: af:ea:a0:36:29:ed:f9:a9:7c:8b:77:33:38:e6:cb: 1f:41:d7:36:4e:f5:30:db:f0:1a:d8:c3:24:74:4a: 0d:83:35:af:5e:02:4c:4b:bf:37:25:7e:f6:4a:15: 7f:17:a1:00:50:2a:ee:4a:83:a6:ae:41:09:18:f7: 16:9b:96:13:bb:c4:f5:ba:00:60:40:24:53:58:fa: ca:98:b2:ca:48:83:a8:9b:35:12:3c:54:35:76:38: 37:8c:02:e8:c1:14:8f:80:7d:5a:7f:65:a3:e3:8b: 8f:29:fd:62:54:75:63:3c:61:28:c8:84:bc:f9:14: 95:47:ac:5e:85:1d:f1:48:ae:2b:91:45:ae:17:74: 09:5a:26:42:2c:26:1a:5e:d9:91:22:f6:c8:e0:85: 23:42:c4:ef:7f:d0:80:9f:59:21:9a:d1:65:3c:e7: 0c:b7:bc:06:1b:9a:f3:2f:58:9e:67:99:41:40:fb: 94:bd:ab:8a:d1:a9:f1:b0:8c:1a:ac:65:57:86:1b: b0:59:ca:e9:78:e7:aa:69:ca:34:10:47:80:bc:f6: 37:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E8:25:A1:16:0B:AD:4F:F9:A6:5C:B9:3E:53:AF:0F:28:A7:49:D7 X509v3 Authority Key Identifier: keyid:7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:5c:15:57:7a:27:d7:3b:72:9f:b8:03:bc:8d:d6:d6:91:36: 51:62:05:12:b6:c5:1a:1b:bd:07:01:a5:bf:59:c1:16:bc:2d: ee:9d:07:b3:0d:f0:cb:90:48:b4:21:14:48:57:73:f5:27:0e: 19:5d:0e:71:23:ef:1c:17:fc:05:6f:34:52:a8:81:e8:97:8e: b9:47:c3:b5:4f:0e:41:c3:dc:49:e3:83:18:d9:5c:7a:31:bc: 43:e8:76:5a:d1:41:1b:33:ff:d9:29:2f:d3:ae:59:49:b9:ae: 73:b9:aa:66:b4:b2:14:a8:a2:52:c7:2e:9e:7f:dc:2a:8f:c1: 9b:02:be:43:44:c6:61:ff:64:44:6e:20:be:d0:93:72:2f:27: 76:6a:0f:49:92:5f:20:f5:fb:ae:d8:35:5c:45:36:bd:2d:95: b0:e0:a0:c6:7b:d9:74:a1:a7:f5:87:34:e8:28:f0:e0:08:b9: eb:0d:27:a7:90:66:58:c6:4f:70:2f:93:b1:42:58:e5:d3:c5: 65:4e:48:34:23:dd:d5:b1:91:e8:e2:fe:67:71:7f:f9:40:b9: 31:f0:07:89:49:00:bb:84:26:7e:1c:c9:90:6d:43:08:e8:9d: 61:ce:55:0a:9d:a8:7f:d6:a0:e3:27:3e:f5:e2:2b:22:dd:c5: aa:57:81:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI3NUIxMTAvBgNVBAUTKDdGMTYxQUNGMTY0MDA3RThGN0Q4Qzc3MTE1QTVBMzlE MDQzNjQ4RjgwHhcNMjUxMjIyMTUwODQ0WhcNMjUxMjI5MTUwODQ0WjAYMRYwFAYD VQQDDA02OTQ5NWVmYy0zYzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsot9Lv1JndMCPg31ZmxtD0KRGoxrJMp5lgicwS9xYuBM3Lb3ZWe6x0XkC9Gv 6qA2Ke35qXyLdzM45ssfQdc2TvUw2/Aa2MMkdEoNgzWvXgJMS783JX72ShV/F6EA UCruSoOmrkEJGPcWm5YTu8T1ugBgQCRTWPrKmLLKSIOomzUSPFQ1djg3jALowRSP gH1af2Wj44uPKf1iVHVjPGEoyIS8+RSVR6xehR3xSK4rkUWuF3QJWiZCLCYaXtmR IvbI4IUjQsTvf9CAn1khmtFlPOcMt7wGG5rzL1ieZ5lBQPuUvauK0anxsIwarGVX hhuwWcrpeOeqaco0EEeAvPY3xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfoJaEW C61P+aZcuT5Trw8op0nXMB8GA1UdIwQYMBaAFH8WGs8WQAfo99jHcRWlo50ENkj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjc1Qi9BQjIwMjIzMDFE QTkxMUUyQjA5NUM0QTQwOEIwMkNEMi9meFlhenhaQUItajMyTWR4RmFXam5RUTJT UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z4WWF6eFpBQi1qMzJNZHhGYVdqblFRMlNQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjc1Qi9BQjIwMjIzMDFEQTkxMUUyQjA5NUM0QTQwOEIwMkNEMi9meFlhenhaQUIt ajMyTWR4RmFXam5RUTJTUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuXBVXeifXO3KfuAO8jdbWkTZRYgUStsUaG70HAaW/WcEWvC3unQez DfDLkEi0IRRIV3P1Jw4ZXQ5xI+8cF/wFbzRSqIHol465R8O1Tw5Bw9xJ44MY2Vx6 MbxD6HZa0UEbM//ZKS/TrllJua5zuapmtLIUqKJSxy6ef9wqj8GbAr5DRMZh/2RE biC+0JNyLyd2ag9Jkl8g9fuu2DVcRTa9LZWw4KDGe9l0oaf1hzToKPDgCLnrDSen kGZYxk9wL5OxQljl08VlTkg0I93VsZHo4v5ncX/5QLkx8AeJSQC7hCZ+HMmQbUMI 6J1hzlUKnah/1qDjJz714isi3cWqV4Gh -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:26 2025 by rpki-client